Welcome to GeekPolice!

Our Appeal to YOU: Please join and help us grow this website. We truly love technology and security and we want to share it with the world. Recognize the excitement of technology here daily:☞Security Discussion on malware, ransomware, and much more!
☞24/7 hard- and software tech support (+mobile!)
☞Virus and malware removal support
☞Tons of tutorials, guides and solutions
☞The very finest of our voluntary Support Staff
☞Much, much more absolutely FREE of any charge!

Note to non-members: Guests are able to open topics and reply to posts; however, guests are not allowed to create their own profile, unless they register (which you can do so below). By registering, you unlock many more capabilities of this site, and are able to interact with other members including making friends! Who wouldn't love a friendly tech community? Join us now!

ok combofix uninstall successful , i had to turn off avira to do so, then immediately turned it back on.Here is the Avira scan log I received, I am sending it, because I got alot of trojan and rootkit messages while running scan.Also I deleted all of the things you mentioned above the combofix delete so you suggest to not use pokerstars? or just be careful?

Begin scan in 'C:\' C:\hiberfil.sys [WARNING] The file could not be opened!C:\pagefile.sys [WARNING] The file could not be opened!C:\Qoobox\Quarantine\C\WINDOWS\system32\8f8fcb63b7e57edadea0e91ca4f45135.sys.vir [DETECTION] Is the TR/Trash.Gen Trojan [NOTE] The file was moved to '49fbc579.qua'!C:\Qoobox\Quarantine\C\WINDOWS\system32\dcbaebeacb.dll.vir [DETECTION] Is the TR/Trash.Gen Trojan [NOTE] The file was deleted!C:\Qoobox\Quarantine\C\WINDOWS\system32\UACfketevcu.dll.vir [DETECTION] Contains recognition pattern of the RKIT/TDss.eyj.66 root kit [NOTE] The file was deleted!C:\Qoobox\Quarantine\C\WINDOWS\system32\UACikpahhiq.dll.vir [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan [NOTE] The file was deleted!C:\Qoobox\Quarantine\C\WINDOWS\system32\UACmhtvjyxo.dll.vir [DETECTION] Is the TR/TDss.ror Trojan [NOTE] The file was deleted!C:\Qoobox\Quarantine\C\WINDOWS\system32\UACoqislaoe.dll.vir [DETECTION] Contains recognition pattern of the RKIT/TDss.eyj.65 root kit [NOTE] The file was deleted!C:\Qoobox\Quarantine\C\WINDOWS\system32\UACstuaaleo.dll.vir [DETECTION] Is the TR/TDss.roq Trojan [NOTE] The file was deleted!C:\Qoobox\Quarantine\C\WINDOWS\system32\_8f8fcb63b7e57edadea0e91ca4f45135.sys_.vir.vir [DETECTION] Is the TR/Trash.Gen Trojan [NOTE] The file was deleted!C:\Qoobox\Quarantine\C\WINDOWS\system32\_8f8fcb63b7e57edadea0e91ca4f45135_.sys.zip [0] Archive type: ZIP --> 8f8fcb63b7e57edadea0e91ca4f45135.sys [DETECTION] Contains recognition pattern of the RKIT/Agent.39936 root kit [NOTE] The file was moved to '4a29c645.qua'!C:\Qoobox\Quarantine\C\WINDOWS\system32\__8f8fcb63b7e57edadea0e91ca4f45135.sys__.vir.zip [0] Archive type: ZIP --> _8f8fcb63b7e57edadea0e91ca4f45135.sys_.vir [DETECTION] Contains recognition pattern of the RKIT/Agent.39936 root kit [NOTE] The file was moved to '49fbc6b9.qua'!C:\Qoobox\Quarantine\C\WINDOWS\system32\drivers\_UACinapaqfh_.sys.zip [0] Archive type: ZIP --> UACinapaqfh.sys [DETECTION] Is the TR/Rootkit.Gen Trojan [NOTE] The file was moved to '4a04c6e8.qua'!C:\System Volume Information\_restore{39C571A2-5C6A-433B-8AC6-DBD815F09639}\RP1\A0000020.dll [DETECTION] Is the TR/Trash.Gen Trojan [NOTE] The file was deleted!C:\System Volume Information\_restore{39C571A2-5C6A-433B-8AC6-DBD815F09639}\RP2\A0000117.sys [DETECTION] Is the TR/Trash.Gen Trojan [NOTE] The file was deleted!Begin scan in 'D:\'

Pokerstars is a legit site, but Poker sites often have ads on them that aren't filtered out, so clicking ads may lead you to a harmful site.

Avira only found system restore points and Combofix quarantine folder.

Delete this folder in bold:C:\Qoobox

Lets reset system restore manually.

To turn off System Restore, follow these steps:1. Click Start, right-click My Computer, and then click Properties.2. Click the System Restore tab.3. Click the Turn off System Restore check box (or the Turn off System Restore on all drives check box), and then click OK.4. Click Yes when you receive the prompt to the turn off System Restore.

Now we need to make a new restore point.To turn on System Restore, follow these steps:1. Click Start, right-click My Computer, and then click Properties.2. Click the System Restore tab.3. Click the Turn off System Restore check box (To turn on System Restore), and then click OK.

Ok System restore points done the Qoobox could not be found in the search, when i was deleting the other things I believe not a 100% sure, but that i saw it in one of those componets, so maybe it was already deleted?

Below I have included a number of recommendations for how to protect your computer in order to prevent future malware infections. Please take these recommendations seriously; these few simple steps can stave off the vast majority of spyware problems. As happy as we are to help you, for your sake we would rather not have repeat customers.

1) Please navigate to http://windowsupdate.microsoft.com and download all the "critical updates" for Windows. This can patch many of the security holes through which attackers can gain access to your computer.

Please either enable Automatic Updates under Start -> Control Panel -> Automatic Updates , or get into the habit of checking for Windows updates regularly. I cannot stress enough how important this is.

2) In order to protect yourself against spyware, you should consider installing and running the following free programs:

Ad-Aware SEA tutorial on using Ad-Aware to remove spyware from your computer may be found here.

Spybot-Search & DestroyA tutorial on using Spybot to remove spyware from your computer may be found here. Please also remember to enable Spybot's "Immunize" and "TeaTimer" features.

SpywareBlasterA tutorial on using SpywareBlaster to prevent spyware from ever installing on your computer may be found here.

SpywareGuardA tutorial on using SpywareGuard for realtime protection against spyware and hijackers may be found here.

Make sure to keep these programs up-to-date and to run them regularly, as this can prevent a great deal of spyware hassle.

I downloaded the adobe9.1. System is a go. Will also re add ad aware and maybe another, thinking i will also change my current firewall to one you recommend. I will take the resolved issue survey. And again, I can not state how much I truly appreciate the time and effort you have took to help me with all my issues. I hope to not be a repeat user of this site. But if so happens that I need help, you will be the first I contact. for saving my pc!